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PATENT CLAIMS 

1. A computer system for providing security awareness in an organization, 
comprising: 

a memory means, constituted by a hard disk or Random Access 
Memory device, 

a central processor unit connected to said memory means, 

an input device, constituted by a mouse or keyboard device, connected 
to said central processor unit, for the input of a piece of security information into said 
computer system for storing said security information in said memory means as an 
information security object, 

an output device, constituted by a printer or display device, connected 
to said central processor unit for the output of security information, 

a policy module communicating with said input device and said memory 
means for the conversion of said piece of security information into said information 
security object to be stored in said memory means, and 

a survey module communicating with said memory means and said 
output means for generating from said information security object an element of a 
questionnary to be output by means of said output device. 

2. The computer system according to claim 1 , further comprising an educational 
module communicating with said memory means for receiving through said input 
device a set of answers to said questionnary and for comparing said set of answers 
of said questionnary with said information security objects for determining the 
correct and the incorrect answers, and generating, based on said incorrect answers, 
an educational program to be output by means of said output device. 

3. The computer system according to claim 2, said set of answers being stored in 
said memory means. 

4. The computer system according to any of the claims 1-3, said memory means 
being organized as a database. 
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5. The computer system according to any of the claims 1-4, said computer system 
constituting a stand alone computer or alternatively a computer system including a 
network and a plurality of PC's each including an input device and an output device 
to be operated by a respective user. 

5 

6. The computer system according to any of the claims 1-5, said central processor 
unit controls in said conversion of said piece of said security information into said 
information security object, said policy module to check in said memory means the 
possible presence of a corresponding security information object. 

10 

7. A method of providing security awareness in an organization, comprising the 
steps of providing a piece of security information, storing said piece of security 
information in a memory means as an information security object, said information 
security object being generated in a policy module, generating in a survey module 

15 an element of a questionnary from said information security object and output said 
questionnary including said element. 

8. The method according to claim 7, further comprising any of the features of the 
computer system according to any of the claims 1-6. 



